$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f0825e7-e80f-3eb2-81c7-75d7989473fe.roa File: 3f0825e7-e80f-3eb2-81c7-75d7989473fe.roa (raw, json) Hash identifier: /Ns42HEPAFfaCHb8NzoP6UduymVs/omm66dHAfwQG9Q= Subject key identifier: 01:75:4D:FA:0B:C5:A2:56:EE:C3:DE:EF:9E:4A:41:1A:22:2A:4B:C2 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F43285849350E98CADCE09E9286397D00 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f0825e7-e80f-3eb2-81c7-75d7989473fe.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 33392 IP address blocks: 209.35.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:98:ca:dc:e0:9e:92:86:39:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=9ec3a4e1-cbd4-40aa-8930-9b22dc5dc012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fe:b9:43:68:f5:0e:88:a5:22:99:29:62:aa: 43:42:4b:60:58:11:93:5c:b6:45:c8:1c:d4:f5:bc: d0:82:ff:6e:45:55:3c:99:5d:77:03:10:46:0b:4a: 07:f2:30:81:b7:a0:8e:39:b7:c2:30:d7:40:e6:a5: 27:f3:e6:08:d3:04:16:cc:97:d3:87:a4:eb:07:09: d2:c2:f2:7f:b4:6e:b3:7a:44:6c:fc:5d:c5:35:d8: e7:60:e3:65:dc:f6:8b:bc:ac:7f:df:42:06:17:f5: ef:c5:8e:90:89:e7:50:3c:27:5b:19:f8:94:f0:27: 13:dc:d7:e9:7c:b1:bf:1a:b2:ce:b4:50:f3:b6:47: b0:0f:26:59:d8:0c:43:8f:9a:5d:10:e7:ac:a5:e4: 46:d7:bb:21:80:74:d0:9d:9a:c4:64:4f:40:35:9e: f9:02:ec:45:56:b6:69:0b:d1:c2:9b:6c:73:30:76: fc:ae:d5:96:49:f9:c4:58:26:2d:f4:e0:e1:1a:cf: fa:95:96:89:1a:c8:20:07:3b:99:df:26:bd:cf:8d: 73:1c:4b:bc:a6:da:a8:b4:2f:19:23:66:70:cd:6f: 70:72:b9:38:8d:78:4d:80:e9:29:d9:59:d0:81:ca: b4:41:9e:02:79:6b:03:99:c6:4a:1b:22:a8:cb:10: a6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:75:4D:FA:0B:C5:A2:56:EE:C3:DE:EF:9E:4A:41:1A:22:2A:4B:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f0825e7-e80f-3eb2-81c7-75d7989473fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:b1:24:2d:d4:38:49:2f:da:ce:75:00:3c:84:e3:eb:cc:6c: 7f:3b:a4:9e:9f:93:ec:ba:9a:81:c3:11:b9:bd:4a:e4:ea:eb: 21:52:e7:28:d3:bf:0e:09:e5:f4:88:f1:67:c5:6f:9a:b7:eb: 54:60:9a:58:c0:b2:e7:ec:b0:60:6c:a3:88:57:25:af:4a:df: e9:63:61:2f:b0:8a:77:24:e5:e0:86:eb:be:32:d4:13:09:02: 4d:fd:df:68:a9:23:70:56:22:04:3a:78:60:51:36:14:bf:80: a8:2b:fb:37:a4:1a:d1:4f:8e:7d:62:d8:28:30:a5:1d:b9:4c: 9d:67:da:45:52:13:d7:1b:41:29:c5:3c:50:e4:6f:db:c6:d3: 5e:a1:ee:b0:ea:d1:d3:1b:99:9b:f0:87:6b:fa:80:df:86:bf: 8e:46:bf:46:f2:ba:fe:b8:84:75:3f:8a:09:0d:f6:d9:cc:24: 16:b8:0c:11:e2:09:d4:0f:a0:9e:ff:0d:b6:7b:cb:ec:01:3a: d1:fe:a8:b7:30:75:51:c3:b6:00:2e:8f:5a:b9:2b:f5:3c:ac: 7c:e7:4d:0a:17:67:c2:91:d5:49:3c:48:57:aa:cb:79:fe:91: 7c:99:9a:2f:6f:5c:70:3a:60:f1:6c:9e:61:1e:5f:5a:63:48: 2a:02:e5:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DpjK3OCekoY5fQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk OWVjM2E0ZTEtY2JkNC00MGFhLTg5MzAtOWIyMmRjNWRjMDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv65Q2j1DoilIpkpYqpDQktgWBGTXLZFyBzU 9bzQgv9uRVU8mV13AxBGC0oH8jCBt6COObfCMNdA5qUn8+YI0wQWzJfTh6TrBwnS wvJ/tG6zekRs/F3FNdjnYONl3PaLvKx/30IGF/XvxY6QiedQPCdbGfiU8CcT3Nfp fLG/GrLOtFDztkewDyZZ2AxDj5pdEOespeRG17shgHTQnZrEZE9ANZ75AuxFVrZp C9HCm2xzMHb8rtWWSfnEWCYt9ODhGs/6lZaJGsggBzuZ3ya9z41zHEu8ptqotC8Z I2ZwzW9wcrk4jXhNgOkp2VnQgcq0QZ4CeWsDmcZKGyKoyxCmEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAF1TfoLxaJW7sPe755KQRoiKkvCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvM2YwODI1ZTctZTgwZi0z ZWIyLTgxYzctNzVkNzk4OTQ3M2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0SMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCxJC3UOEkv2s51ADyE4+vMbH87pJ6fk+y6moHDEbm9SuTq6yFS5yjT vw4J5fSI8WfFb5q361RgmljAsufssGBso4hXJa9K3+ljYS+winck5eCG674y1BMJ Ak3932ipI3BWIgQ6eGBRNhS/gKgr+zekGtFPjn1i2CgwpR25TJ1n2kVSE9cbQSnF PFDkb9vG016h7rDq0dMbmZvwh2v6gN+Gv45Gv0byuv64hHU/igkN9tnMJBa4DBHi CdQPoJ7/DbZ7y+wBOtH+qLcwdVHDtgAuj1q5K/U8rHznTQoXZ8KR1Uk8SFeqy3n+ kXyZmi9vXHA6YPFsnmEeX1pjSCoC5cg= -----END CERTIFICATE-----Generated at Sun Apr 27 23:18:15 2025 by rpki-client